← All talks
Tool

BSides talks featuring Windows Event Forwarding

24 talks mention this tool across 16 BSides chapters.

Windows native capability for centralizing endpoint logs to a central collection point for threat hunting and analysis

Talks featuring Windows Event Forwarding

27:13
BSides Iowa 2018: "Threat Hunting Windows Event Logs w/ Powershell"
BSides Iowa
Open →2018-04
50:12
Active Directory Password Blacklisting
Leeren Chang
BSides Las Vegas · 2018
TechnicalActive DirectoryBlueDemoTalk
Open →2018-09
38:31
Logging Made Easy - Shane M and Adam B
BSides Bristol
Open →2019-07
29:35
LSASS - What should we be doing?
Robert Wilson
BSides Augusta · 2021
TechnicalActive DirectoryThreat ModelingIntermediaryBlueTalk
Open →2021-10
33:40
Quick And Easy Forensic Timelines Via Sysmon, WEF, And ELK
Aaron Jewitt
BSides Munich · 2019
TechnicalDFIRDetection EngineeringBlueTalk
Open →2019-03
46:18
Log All The Things! Proactive Forensics using Log Analysis
Aaron BeuhringKyle Salous
BSides DC · 2015
TechnicalTalk
Open →2015-11
30:06
Windows Event Forwarding and OSSEC — You can do this!
Robert Wilson
BSides Augusta · 2018
TechnicalDevSecOpsBlueTalk
Open →2018-11
37:47
Don't Google 'PowerShell Hunting'
Josh RykowskiSean Eyre
BSides Augusta · 2017
TechnicalDFIRDetection EngineeringMalware AnalysisTalk
Open →2017-09
51:55
BSides Rochester 2019 - Threat Hunting and Other Arcane Magic
BSidesROC
Open →2019-03
43:57
MS SQL Super Quality Logs
Tristan
BSides Perth · 2023
TechnicalDetection EngineeringThreat IntelIntermediaryBlueMethodologyTechnical Deep-divesTalk
Open →2023-08
45:34
Purple Teaming Cloud Identity Simulation Labs for Red and Blue teams
Jason Ostrom
BSides Dallas/Fort Worth · 2022
TechnicalCloud IAMDetection EngineeringThreat ModelingPurpleTechnical Deep-divesDemoTalk
Open →2022-11
42:15
BSidesAugusta 2014 Tim Crothers - Techniques for Fast Windows Investigations
BSides Augusta
Open →2014-09
53:14
BSidesSLC 2017 -- Haydn Johnson -- Planning a Purple Team Exercise; The What, Why, and How
BSides SLC
Open →2017-07
34:01
Detect the Undetectable with Sysmon and PowerShell Logs
Dimitrios Margaritis
BSides Athens · 2017
TechnicalDetection EngineeringMalware AnalysisThreat IntelBlueTalk
Open →2017-10
46:20
Xavier Mertens - All Your Logs Are Belong To You!
Xavier Mertens
BSides London · 2014
Talk
Open →2014-09
31:04
Host-Hunting on a Budget
Leo Bastidas
BSides Augusta · 2019
TechnicalDFIRDetection EngineeringThreat IntelBlueTalk
Open →2019-10
51:15
Microsoft Quick Assist
Tyler Hudak
BSidesROC · 2025
TechnicalTalk
Open →2025-03
41:32
Dispelling the Myth of "Maturity" in Threat Hunting
Kelsey Seymour
BSides Buffalo · 2023
TechnicalBlueTalk
Open →2023-06
49:39
Keynote: Knowledge is Power
Jessica Payne
BSides Charm · 2018
CommunityIntroKeynote
Open →2021-05
52:37
Building the Panopticon: Centralized Logging and Alerting With Free Tools
Matthew Gracie
BSidesROC · 2018
TechnicalBlueTalk
Open →2018-04
25:58
Active Directory Security: Configuration and Defense
Joe BateCheryl Biswas
BSides Toronto · 2017
TechnicalActive DirectoryKerberosIntermediaryTalk
Open →2018-01
45:05
Detecting the Elusive: Active Directory Threat Hunting
Sean Metcalf
BSides Charm · 2017
TechnicalActive DirectoryDetection EngineeringKerberosBlueTechnical Deep-divesTalk
Open →2021-05
25:35
GT - Can Data Science Deal With PAM? - Leila Powell
BSides Las Vegas
Open →2018-09
46:50
Threat Hunting: Defining the Process While Circumventing Corporate Obstacles
BSides Philly · 2018
TechnicalBlueTalk
Open →2018-11